+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: i need some assistance with SQL and XSS (/showthread.php?tid=5546918)
i need some assistance with SQL and XSS - dkaeq0 - Feb 9, 2017
Im working on a website that has the 2 main vulnerabilities, SQL Injection and XSS.
-SQL INJECTION
the sql injection on the site is a bit tricky, there is a PHP database searchbar on the website that searchs through listed products, it can be exploited because it gives out SQL syntax errors, i know there is a way to bypass wordlimits in search engines however i can seem to find any so i need peoples inputs below
-Cross Site Scripting
the XSS vuln. on the website, i havent tested anything so far but there is a contact form which is 100% vulnerable, although if it doesnt work the site admin will recieve a failed attempt at XSS and they might do fix up their site.
TL:DR; just need some help on a website i am working on